Joywork/ajax/deleteUserObject.php
2026-05-22 21:21:54 +03:00

111 lines
4.5 KiB
PHP

<?php
require_once($_SERVER['DOCUMENT_ROOT']."/config.php");
if($_SESSION['id'] && $_GET['objId']) {
$result = SelectelApi::getTokenAndUrl();
$token = $result[0];
$storageUrl = $result[1];
$db_sphinx = new MysqlPdo(hstsph2, null, null, null, true, '9306');
$get=clearInputData($_GET);
$sql3="SELECT * FROM objects WHERE objects.id = $get[objId]";
$rez_obj=mysql_query($sql3);
$obj=mysql_fetch_assoc($rez_obj);
$canDelete = false;
if ($obj['id_add_user'] > 0) {
if ($obj['id_add_user'] == $_SESSION['id']) {
$canDelete = true;
} else {
$currentUser = new User;
$currentUser->get($_SESSION['id']);
if ($obj['id_add_user'] != $_SESSION['id'] && ($currentUser->agency == 1 || $currentUser->manager == 1 || $_SESSION['users_admin'])) {
$objectUser = new User;
$objectUser->get($obj['id_add_user']);
//если добавлено пользователем агентства
if (isset($objectUser->agencyId) && $objectUser->agencyId == $currentUser->agencyId) {
$canDelete = true;
} else {
// или самим агентством
if ($currentUser->agencyId == $obj['id_add_user']) {
$canDelete = true;
}
}
}
}
}
if ($obj && $obj['archive'] == 1 && $canDelete) {
if ($obj['use_in_advert'] == 0) {
//удаляем фото
$sqlSelectPhoto = "select oop.id, oop.object_photo_id from objects_object_photo oop where oop.object_id = $get[objId]";
$rezSelectPhoto = mysql_query($sqlSelectPhoto);
if (mysql_num_rows($rezSelectPhoto) > 0) {
while ($ph = mysql_fetch_assoc($rezSelectPhoto)) {
$sqlPhoto = "SELECT * FROM object_photo WHERE id = $ph[object_photo_id]";
$rezPhoto = mysql_query($sqlPhoto);
if (mysql_num_rows($rezPhoto) > 0) {
$photo = mysql_fetch_assoc($rezPhoto);
if (strpos($photo["photo"], "https://data.joywork.ru/") !== false) {
$nfp = str_replace("https://data.joywork.ru/", "", $photo["photo"]);
SelectelApi::deleteFile($storageUrl, $token, $nfp);
}
}
}
}
}
$sql = "DELETE FROM favor WHERE id_obj=$get[objId]";
mysql_query($sql);
$sql = "DELETE FROM sended_pdf WHERE id_object=$get[objId]";
mysql_query($sql);
$sql = "DELETE FROM sp_metro WHERE id_obj=$get[objId]";
mysql_query($sql);
$sql = "DELETE FROM objects WHERE id=$get[objId] AND id_add_user=$obj[id_add_user]";
mysql_query($sql);
$sql = "DELETE FROM user_object_events WHERE object_id=$get[objId] AND user_id=$obj[id_add_user]";
mysql_query($sql);
$sql = "DELETE FROM object_nb_info WHERE object_id = $get[objId]";
mysql_query($sql);
$sql = "DELETE FROM object_location WHERE object_id = $get[objId]";
mysql_query($sql);
$sql = "DELETE FROM objects_plan WHERE object_id = $get[objId]";
mysql_query($sql);
$sql = "DELETE FROM object_notes WHERE object_id = $get[objId]";
mysql_query($sql);
$sql = "DELETE FROM objects_additional_information WHERE object_id = $get[objId]";
mysql_query($sql);
$sqlSelectPhoto = "select oop.id, oop.object_photo_id from objects_object_photo oop where oop.object_id = $get[objId]";
$rezSelectPhoto = mysql_query($sqlSelectPhoto);
if (mysql_num_rows($rezSelectPhoto) > 0) {
while ($ph = mysql_fetch_assoc($rezSelectPhoto)) {
$sqlDeletePhoto = "DELETE FROM object_photo where id = $ph[object_photo_id]";
mysql_query($sqlDeletePhoto);
$sqlDeletePhotoLinks = "DELETE FROM objects_object_photo where id = $ph[id]";
mysql_query($sqlDeletePhotoLinks);
}
}
//Удаление из сфинкс
$sql = "DELETE FROM objects_rt WHERE id=$get[objId] AND id_add_user=$obj[id_add_user]";
$db_sphinx->query($sql, true);
$sql = "UPDATE objects SET del=1 WHERE id=$get[objId] AND id_add_user=$obj[id_add_user]";
$db_sphinx->query($sql,true);
}
}